Privacy Policy

Effective Date: [01/01/2012]
Last Updated: [01/01/2025]

At Sumatra Tour & Travel, your privacy is important to us. This Privacy Policy outlines how we collect, use, store, and protect your personal information when you visit our website, make a booking, or otherwise engage with our services.

By using our website or providing us with your personal information, you agree to the terms of this Privacy Policy.

1. Information We Collect

We may collect the following types of personal data from you:

1.1 Personal Identification Information:

  • Full name

  • Email address

  • Phone number

  • Address

  • Passport details (for booking purposes)

  • Nationality

  • Emergency contact information

1.2 Booking & Payment Information:

  • Travel preferences

  • Tour selections

  • Payment card details (processed securely via third-party payment providers)

1.3 Technical & Usage Information:

  • IP address

  • Browser type

  • Device information

  • Website usage and interaction data (via cookies or analytics tools)

1.4 Communication Data:

  • Inquiries submitted via forms

  • Email correspondence

  • Feedback or reviews

2. How We Use Your Information

We use your personal data for the following purposes:

  • To process and confirm bookings and reservations

  • To communicate with you regarding your trip, itinerary, or changes

  • To provide customer support and respond to inquiries

  • To send updates, newsletters, or promotional offers (with your consent)

  • To improve our website, services, and user experience

  • To comply with legal obligations (e.g., travel regulations, tax reporting)

3. Legal Basis for Processing

We only process your personal data when there is a lawful basis to do so, which may include:

  • Contractual necessity: to fulfill travel services you requested

  • Legal obligation: compliance with travel or financial regulations

  • Consent: for marketing communications (which you can withdraw at any time)

  • Legitimate interests: to improve services and enhance user experience

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. However, we may share your data with trusted third parties in the following cases:

  • Travel partners or service providers (e.g., hotels, guides, transport companies) necessary to fulfill your booking

  • Payment gateways for secure processing of payments

  • Legal or regulatory authorities when required to comply with laws

  • IT or hosting providers who support our website infrastructure (under strict confidentiality agreements)

All third parties are required to handle your data in compliance with relevant privacy law

5. Data Security

We implement appropriate technical and organizational security measures to protect your personal data from unauthorized access, disclosure, alteration, or destruction. This includes:

  • Secure server hosting

  • SSL encryption for data transmission

  • Access controls for internal systems

  • Secure payment processing through compliant third-party providers

While we strive to protect your data, no system is 100% secure. You share information at your own risk.

6. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected, including legal, accounting, or reporting requirements. When data is no longer required, it will be securely deleted or anonymized.

7. Your Rights

Depending on your location and applicable data protection laws, you may have the following rights:

  • Right to access your personal data

  • Right to correct inaccurate or incomplete data

  • Right to request deletion of your data (“right to be forgotten”)

  • Right to restrict or object to processing

  • Right to withdraw consent for marketing

  • Right to data portability

  • Right to lodge a complaint with a supervisory authority

To exercise your rights, please contact us at:
📧 [rimba.driver@gmail.com]

8. Cookies and Tracking Technologies

Our website uses cookies and similar technologies to improve your browsing experience, analyze traffic, and offer personalized content. You can manage or disable cookies through your browser settings. For more details, please refer to our [Cookie Policy].

9. International Data Transfers

If you are located outside of Indonesia, please be aware that your information may be transferred to and processed in countries where data protection laws may differ. We take necessary steps to ensure that your data remains protected in accordance with this Privacy Policy.

10. Third-Party Links

Our website may contain links to external websites not operated by us. We are not responsible for the content or privacy practices of these third parties. We encourage you to review their policies before sharing any personal data.

11. Changes to This Policy

We reserve the right to update or modify this Privacy Policy at any time. Changes will be posted on this page with an updated “Effective Date.” You are encouraged to review this policy periodically to stay informed of any updates.

12. Contact Us

If you have any questions or concerns about this Privacy Policy or how we handle your personal data, please contact us at:

Sumatra Tour & Travel
📍 [Taman annafris Residence 2, Medan]
📧 Email: [sumatratourandtravel@gmail.com]
📞 Phone: [+6281246264321]